Ansible: How to encrypt some variables in an inventory file in a separate vault file?

Since Ansible 2.3 you can encrypt a Single Encrypted Variable. IMO, a walkthrough is needed as the doco’s seem pretty terse. Given an example of: mysql_password: password123 (within main.yml) Run a command such as: ansible-vault encrypt_string password123 –ask-vault-pass This will produce: !vault | $ANSIBLE_VAULT;1.1;AES256 66386439653236336462626566653063336164663966303231363934653561363964363833 3136626431626536303530376336343832656537303632313433360a626438346336353331 Encryption successful paste this into your main.yml: mysql_password: !vault … Read more

AES Encryption – Key versus IV

As you can see from the other answers, having a unique IV per encrypted file is crucial, but why is that? First – let’s review why a unique IV per encrypted file is important. (Wikipedia on IV). The IV adds randomness to your start of your encryption process. When using a chained block encryption mode … Read more

Protecting Java Source Code From Being Accessed [closed]

I had the same problem as you a long time ago. We had Windows 2000 machines and uploaded files to a Novel network folder that everyone could see. I used several tricks to beat even the best thieves: whitespace watermarking; metadata watermarking; unusual characters; trusted timestamping; modus operandi. Here’s them in order. Whitespace watermarking: This … Read more

How to Export Private / Secret ASC Key to Decrypt GPG Files

You can export the private key with the command-line tool from GPG. It works on the Windows-shell. Use the following command: gpg –export-secret-keys A normal export with –export will not include any private keys, therefore you have to use –export-secret-keys. Edit: To sum up the information given in my comments, this is the command that … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)